Fortinet NSE5_FMG-6.4 Online Practice Questions and Exam Preparation

Fortinet NSE5_FMG-6.4 Online Questions & Answers

• Question 51:

  View the following exhibit:

  

  How will FortiManager try to get updates for antivirus and IPS?

  A. From the list of configured override servers with ability to fall back to public FDN servers
  B. From the configured override server list only
  C. From the default server fdsl.fortinet.com
  D. From public FDNI server with highest index number only
  A. From the list of configured override servers with ability to fall back to public FDN servers

  ---

  Reference: https://community.fortinet.com/t5/Fortinet-Forum/Clarification-of-FortiManager-s-quot-Server-Override-Mode-quot/td-p/89973

• Question 52:

  Which two statements about the scheduled backup of FortiManager are true? (Choose two.)

  A. It does not back up firmware images saved on FortiManager.
  B. It can be configured using the CLI and GUI.
  C. It backs up all devices and the FortiGuard database.
  D. It supports FTP, SCP, and SFTP.
  A. It does not back up firmware images saved on FortiManager.
  D. It supports FTP, SCP, and SFTP.

  ---

  Reference:

  https://docs.ansible.com/ansible/latest/collections/fortinet/fortimanager/fmgr_system_backu p_allsettings_module.html

• Question 53:

  Which two items are included in the FortiManager backup? (Choose two.)

  A. FortiGuard database
  B. Global database
  C. Logs
  D. All devices
  B. Global database
  D. All devices

  ---

  Reference: https://kb.fortinet.com/kb/viewContent.do?externalId=FD34549

• Question 54:

  Which two conditions trigger FortiManager to create a new revision history? (Choose two.)

  A. When configuration revision is reverted to previous revision in the revision history
  B. When FortiManager installs device-level changes to a managed device
  C. When FortiManager is auto-updated with configuration changes made directly on a managed device
  D. When changes to device-level database is made on FortiManager
  B. When FortiManager installs device-level changes to a managed device
  C. When FortiManager is auto-updated with configuration changes made directly on a managed device

  ---

  Reference: https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FortiManager_Admin_Guide/1000_Device%20Manager/1500_Manage_device_configs/0 600_Manage%20config%20rev%20history.htm

• Question 55:

  View the following exhibit.

  

  An administrator is importing a new device to FortiManager and has selected the shown options. What will happen if the administrator makes the changes and installs the modified policy package on this managed FortiGate?

  A. The unused objects that are not tied to the firewall policies will be installed on FortiGate
  B. The unused objects that are not tied to the firewall policies will remain as read-only locally on FortiGate
  C. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted
  D. The unused objects that are not tied to the firewall policies in policy package will be deleted from the FortiManager database
  C. The unused objects that are not tied to the firewall policies locally on FortiGate will be deleted

  ---

  Reference: https://community.fortinet.com/t5/FortiManager/Import-all-objects-Versus-Import-only-policy-dependent-objects/ta-p/193259?externalID=FD40392

• Question 56:

  What does a policy package status of Modified indicate?

  A. FortiManager is unable to determine the policy package status
  B. The policy package was never imported after a device was registered on FortiManager
  C. The Policy configuration has been changed on a managed device and changes have not yet been imported into FortiManager
  D. The Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.
  D. The Policy package configuration has been changed on FortiManager and changes have not yet been installed on the managed device.

  ---

  Reference: http://help.fortinet.com/fmgr/50hlp/56/5-6-1/FortiManager_Admin_Guide/1200_Policy%20and%20Objects/0800_Managing%20policy%20packages/2200_Policy%20Package%20Installation%20targets.htm

• Question 57:

  Refer to the exhibit.

  

  Which two statements about an ADOM set in Normal mode on FortiManager are true? (Choose two.)

  A. It supports the FortiManager script feature
  B. It allows making configuration changes for managed devices on FortiManager panes
  C. FortiManager automatically installs the configuration difference in revisions on the managed FortiGate
  D. You cannot assign the same ADOM to multiple administrators
  A. It supports the FortiManager script feature
  B. It allows making configuration changes for managed devices on FortiManager panes

  ---

  "FortiGate units in the ADOM will query their own configuration every 5 seconds. If there has been a configuration change, the FortiGate unit will send a diff revision on the change to the FortiManager using the FGFM protocol."

• Question 58:

  Which two items does an FGFM keepalive message include? (Choose two.)

  A. FortiGate uptime
  B. FortiGate license information
  C. FortiGate IPS version
  D. FortiGate configuration checksum
  C. FortiGate IPS version
  D. FortiGate configuration checksum

  ---

  Reference: https://docs.fortinet.com/document/fortimanager/6.2.0/fortigate-fortimanager-communications-protocol-guide/579138/keep-alive-messages

• Question 59:

  You are moving managed FortiGate devices from one ADOM to a new ADOM.

  Which statement correctly describes the expected result?

  A. Any pending device settings will be installed automatically
  B. Any unused objects from a previous ADOM are moved to the new ADOM automatically
  C. The shared policy package will not be moved to the new ADOM
  D. Policy packages will be imported into the new ADOM automaticallyD
  C. The shared policy package will not be moved to the new ADOM

  ---

  Reference: https://community.fortinet.com/t5/FortiManager/Technical-Note-How-to-move-objects-to-new-ADOM-on-FortiManager/ta-p/198342